433 matches found
Amazon Linux 2023 : tpm2-tss, tpm2-tss-devel (ALAS2023-2023-110)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-110 advisory. tpm2-tss is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In affected versions Tss2RCSetHandler and Tss2RCDecode both index...
CBL Mariner 2.0 Security Update: tpm2-tools (CVE-2021-3565)
The version of tpm2-tools installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-3565 advisory. - A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key...
SUSE-SU-2023:0613-1 Security update for tpm2-0-tss
This update for tpm2-0-tss fixes the following issues: - CVE-2023-22745: Fixed a memory safety issue that could be exploited by local attackers with TPM access bsc1207325...
SUSE SLED15: libtss2-esys0 / libtss2-esys0-32bit / libtss2-fapi1 / etc (SUSE-SU-2023:0526-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0526-1 advisory. - CVE-2023-22745: Fixed a memory safety issue that could be exploited by local attackers with TPM access...
SUSE-SU-2023:0526-1 Security update for tpm2-0-tss
This update for tpm2-0-tss fixes the following issues: - CVE-2023-22745: Fixed a memory safety issue that could be exploited by local attackers with TPM access bsc1207325...
CVE-2023-22745 affecting package tpm2-tss for versions less than 2.4.6-2
CVE-2023-22745 affecting package tpm2-tss for versions less than 2.4.6-2. A patched version of the package is available...
[SECURITY] Fedora 36 Update: tpm2-tss-3.2.2-1.fc36
tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...
[SECURITY] Fedora 36 Update: tpm2-tools-5.4-1.fc36
tpm2-tools is a batch of tools for tpm2.0. It is based on tpm2-tss...
Fedora: Security Advisory for tpm2-tools (FEDORA-2023-3a9674404c)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for tpm2-tss (FEDORA-2023-3a9674404c)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 36 : tpm2-tools / tpm2-tss (2023-3a9674404c)
The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-3a9674404c advisory. Fixed: A buffer overflow in tss2-rc as CVE-2023-22745. The drv layer in tss2-rc should have been the policy layer. Spec deviation in FapiGetDescription cause...
SUSE CVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC...
SUSE CVE-2021-3565
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2import used a fixed AES key for the inner wrapper, potentially allowing a MITM attacker to unwrap the inner portion and reveal the key being imported. The highest threat from this vulnerability is to data confidentialit...
MGASA-2023-0050 Updated tpm2-tss packages fix security vulnerability
Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array only has TPM2ERRORTSS2RCLAYERCOUNT entries, so trying to add a handler for higher-numbered layers or decode a response code with such a layer number reads/writes past the end of the buffer...
Updated tpm2-tss packages fix security vulnerability
Tss2RCSetHandler and Tss2RCDecode both index into layerhandler with an 8 bit layer number, but the array only has TPM2ERRORTSS2RCLAYERCOUNT entries, so trying to add a handler for higher-numbered layers or decode a response code with such a layer number reads/writes past the end of the buffer...
CVE-2023-22745 affecting package tpm2-tss 2.4.6-1
CVE-2023-22745 affecting package tpm2-tss 2.4.6-1. A patched version of the package is available...
Fedora: Security Advisory for tpm2-tss (FEDORA-2023-25617e952a)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: tpm2-tss-3.2.2-1.fc37
tpm2-tss is a software stack supporting Trusted Platform ModuleTPM 2.0 syst em APIs. It sits between TPM driver and applications, providing TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers...
Fedora 37 : tpm2-tss (2023-25617e952a)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-25617e952a advisory. Fixed: A buffer overflow in tss2-rc as CVE-2023-22745. The drv layer in tss2-rc should have been the policy layer. Spec deviation in FapiGetDescription cause...
